CVE-2024-37393

SecurEnvoy MFA versions prior to 9.4.514 are vulnerable to multiple LDAP injection vulnerabilities caused by improper validation of user-supplied input. An unauthenticated remote attacker can perform blind LDAP injection attacks against the DESKTOP service via the /secserver HTTP endpoint. This f...